Wednesday, 2018-05-30

*** geekinutah has quit IRC00:04
*** jamespage has quit IRC00:04
*** zul has quit IRC00:04
*** ildikov_ has joined #openstack-ansible00:05
*** ildikov has quit IRC00:05
*** odyssey4me has quit IRC00:05
*** ildikov_ is now known as ildikov00:05
*** boxrick_ has joined #openstack-ansible00:05
*** paulfantom___ has joined #openstack-ansible00:06
*** nicolasbock has quit IRC00:06
*** MasterofJOKers has quit IRC00:06
*** boxrick has quit IRC00:06
*** paulfantom has quit IRC00:06
*** paulfantom___ is now known as paulfantom00:06
openstackgerritVictor Palma proposed openstack/openstack-ansible-ops master: fix bootstrap for ubuntu trusty  https://review.openstack.org/57105200:06
*** dhellmann has quit IRC00:06
*** KeithMnemonic has quit IRC00:08
*** jeferobles has joined #openstack-ansible00:10
*** MasterofJOKers has joined #openstack-ansible00:10
*** odyssey4me has joined #openstack-ansible00:11
*** dhellmann has joined #openstack-ansible00:11
*** ChanServ has quit IRC00:12
*** geekinutah has joined #openstack-ansible00:15
*** zul has joined #openstack-ansible00:16
*** jamespage has joined #openstack-ansible00:16
*** yolanda_ has quit IRC00:19
*** yolanda_ has joined #openstack-ansible00:20
*** ChanServ has joined #openstack-ansible00:33
*** barjavel.freenode.net sets mode: +o ChanServ00:33
*** jothibasu[m] has quit IRC00:37
*** lbragstad[m] has quit IRC00:37
*** keithmnemonic[m] has quit IRC00:37
*** rschulman has quit IRC00:37
*** evrardjp[m] has quit IRC00:37
*** csmart has quit IRC00:38
*** nicolasbock has joined #openstack-ansible00:40
*** jeferobles has quit IRC00:46
*** keithmnemonic[m] has joined #openstack-ansible00:58
*** nurdie_ has joined #openstack-ansible00:59
*** nurdie has quit IRC01:02
*** juhak has quit IRC01:02
*** juhak has joined #openstack-ansible01:03
*** chyka has joined #openstack-ansible01:03
*** chyka has quit IRC01:08
*** mma has joined #openstack-ansible01:13
openstackgerritMerged openstack/openstack-ansible-ops master: fix bootstrap for ubuntu trusty  https://review.openstack.org/57105201:14
openstackgerritMerged openstack/openstack-ansible-ops master: Adjust DHCP range so that nodes can take static address from pool  https://review.openstack.org/57103301:14
*** evrardjp[m] has joined #openstack-ansible01:20
*** jothibasu[m] has joined #openstack-ansible01:20
*** rschulman has joined #openstack-ansible01:20
*** lbragstad[m] has joined #openstack-ansible01:20
*** csmart has joined #openstack-ansible01:20
*** cjloader has joined #openstack-ansible01:21
*** cjloader has quit IRC01:26
*** nurdie_ has quit IRC01:30
*** tux_ has joined #openstack-ansible01:30
*** jamespage has quit IRC01:30
*** nurdie has joined #openstack-ansible01:31
*** gyee has quit IRC01:31
*** nurdie has quit IRC01:35
*** openstacking_123 has joined #openstack-ansible01:38
*** jamespage has joined #openstack-ansible01:44
*** armaan has quit IRC01:48
*** armaan has joined #openstack-ansible01:49
*** openstacking_123 has quit IRC02:28
*** jeferobles has joined #openstack-ansible02:29
*** markvoelker_ has quit IRC02:45
*** jeferobles has quit IRC03:25
*** markvoelker has joined #openstack-ansible03:35
*** mma has quit IRC03:37
*** goldenfri has quit IRC03:37
*** mma has joined #openstack-ansible03:38
*** markvoelker has quit IRC03:39
olivierbourdon38morning everyone03:46
olivierbourdon38are there some places I can have a look at to see interfaces, vlans and bridges configuration of a host machine which would launch KVM/libvirt OSA VMs and also the KVM network settings used by these VMs ?03:48
*** nicolasbock has quit IRC03:55
*** udesale has joined #openstack-ansible03:58
*** poopcat has quit IRC04:11
*** cjloader has joined #openstack-ansible04:19
cloudnullIf this is an existing host, /etc/network/interfaces {,.d} would be a good start04:22
*** tux_ has quit IRC04:23
cloudnullIf you're looking for examples https://github.com/openstack/openstack-ansible/blob/master/etc/network/interfaces.d/openstack_interface.cfg.prod.example04:23
*** cjloader has quit IRC04:24
*** markvoelker has joined #openstack-ansible04:29
*** nurdie has joined #openstack-ansible04:35
evrardjpmorning04:42
*** jeferobles has joined #openstack-ansible04:44
olivierbourdon38many thanks cloudnull and good morning evrardjp04:44
olivierbourdon38however these are the settings for the OSA nodes/VMs right, I am looking for the same thing but for the KVM host which runs them + additional KVM networking settings + VMs KVM network config (like most probably what runs in the CI)04:46
cloudnullolivierbourdon38 you may want to have a look at https://github.com/openstack/openstack-ansible-ops/tree/master/multi-node-aio for interface configs and libvirt setup using nested vert04:51
cloudnullThat setup using a physical host to create vms to spin a test cloud on which can then be used to create more vms.04:52
cloudnullMost of the configs are all there. If I'm.understandjng the ask right.04:52
cloudnullAnd on that note. I sleep. Take care all04:53
evrardjpgn cloudnull04:53
cloudnullChao04:53
olivierbourdon38thanks cloudnull definitely what I was looking for, have a good night04:53
*** markvoelker has quit IRC05:03
*** nurdie has quit IRC05:07
*** radeks__ has joined #openstack-ansible05:09
*** bhujay has joined #openstack-ansible05:10
*** DanyC has joined #openstack-ansible05:14
bhujayodyssey4me:  in queen the pip install role has changed the checking from  {% if pip_lock_to_internal_repo and pip_links | length > 0 %}   to {% if pip_links | length > 0 %}   . As a result the openstack-host-setyp.yml  fails , could this  be a bug ?05:15
bhujayodyssey4me: https://github.com/openstack/openstack-ansible-pip_install/blob/4254996908d390835c7beff3d8b73e8a7c441eb2/templates/pip.conf.j2#L1805:16
*** pvradu has joined #openstack-ansible05:16
*** DanyC has quit IRC05:16
*** DanyC has joined #openstack-ansible05:17
*** tux_ has joined #openstack-ansible05:22
*** asdf___ has joined #openstack-ansible05:23
*** asdf___ has left #openstack-ansible05:24
*** pvradu has quit IRC05:25
*** tux_ has quit IRC05:26
*** tux_ has joined #openstack-ansible05:28
*** tux_ has quit IRC05:29
*** DanyC_ has joined #openstack-ansible05:29
*** DanyC has quit IRC05:31
*** DanyC_ has quit IRC05:34
*** mma has quit IRC05:37
*** bhujay has quit IRC05:41
*** tux_ has joined #openstack-ansible05:45
*** nurdie has joined #openstack-ansible05:45
*** tux_ has quit IRC05:47
*** sar_ has quit IRC05:52
*** bhujay has joined #openstack-ansible05:54
*** jeferobles has quit IRC05:55
*** DanyC has joined #openstack-ansible06:06
*** armaan has quit IRC06:09
*** armaan has joined #openstack-ansible06:09
*** sar_ has joined #openstack-ansible06:12
*** chigang__ has joined #openstack-ansible06:12
*** jeferobles has joined #openstack-ansible06:13
*** cjloader has joined #openstack-ansible06:19
*** markvoelker has joined #openstack-ansible06:20
*** mbuil has joined #openstack-ansible06:22
*** lemouchon has joined #openstack-ansible06:23
*** cjloader has quit IRC06:24
mattoliverauprometheanfire: someone is having trouble with a swift upgrade because the gentoo version of liberasurecode is too old (1.1.1 I think), the latest is 1.5.0. They're going to raise a bug to update the ebuild, but I thought, hey I have a chance to bug you ;)06:29
*** pcaruana has joined #openstack-ansible06:33
*** mma has joined #openstack-ansible06:37
*** DanyC has quit IRC06:37
*** DanyC has joined #openstack-ansible06:38
*** jeferobles has quit IRC06:44
*** markvoelker has quit IRC06:54
*** epalper has joined #openstack-ansible06:56
*** pvradu has joined #openstack-ansible07:00
*** mbuil has quit IRC07:05
*** tosky has joined #openstack-ansible07:06
*** pvradu has quit IRC07:08
Tahvokodyssey4me: o/07:08
*** pvradu has joined #openstack-ansible07:08
prometheanfiremattoliverau: sgtm, I haven't looked at liberasurecode recently, iirc it wasn't hosted on github so getting automated release notifications is hard07:08
*** DanyC_ has joined #openstack-ansible07:09
prometheanfireoh, looks like it moved or something07:09
mattoliverauprometheanfire: fair enough. The guy who popped into the swift channel said 1.5.0 worked and then raised this: https://bugs.gentoo.org/65688207:10
prometheanfiremattoliverau: https://bitbucket.org/tsg-/liberasurecode/ or https://github.com/openstack/liberasurecode07:10
mattoliverauopenstack07:10
prometheanfirek07:10
mattoliverauit was bitbucket but we moved it under openstack.. which might explain some things :)07:11
prometheanfiremattoliverau: did he have to do anything with pyeclib?07:11
mattoliveraunope07:12
mattoliverauhe said it was just liberasure code07:12
*** DanyC has quit IRC07:12
mattoliverautho pyeclib would have moved too07:12
prometheanfirek07:12
mattoliverauoh their probably in the same source tree. that was the plan at one point.07:13
mattoliverau*they're07:13
*** cshen has joined #openstack-ansible07:14
prometheanfirenot anymore07:14
prometheanfirehttps://github.com/openstack/pyeclib07:14
mattoliverauoh, where maybe it never happened then :P07:15
mattoliverau*well07:15
mattoliverauapparently I can't type, it must be the end of my work day :P07:15
prometheanfireI do have PyEClib updated to 1.5.0 :D07:15
prometheanfireit's probably tracked in reqs07:15
prometheanfirenow liberasurecode is too07:15
evrardjpgood morning07:16
mattoliverauprometheanfire: nice, thanks :)07:16
prometheanfireevrardjp: go back to bed07:16
evrardjpprometheanfire: It's been 3 hours I am awake :)07:16
prometheanfireevrardjp: time for a nap07:16
evrardjphaha07:16
prometheanfiresleep is important, or so I've been told07:18
openstackgerritMerged openstack/openstack-ansible-lxc_hosts stable/ocata: Add lxc_net_manage_iptables variable  https://review.openstack.org/56157707:21
*** mbuil has joined #openstack-ansible07:28
*** bhujay has quit IRC07:37
*** markvoelker has joined #openstack-ansible07:45
*** tux_ has joined #openstack-ansible07:48
*** armaan has quit IRC07:48
*** armaan has joined #openstack-ansible07:49
*** markvoelker has quit IRC07:49
*** tux_ has quit IRC07:50
odyssey4meo/07:55
*** chyka has joined #openstack-ansible07:58
*** bhujay has joined #openstack-ansible07:59
*** chyka has quit IRC08:02
*** armaan has quit IRC08:04
*** armaan has joined #openstack-ansible08:04
*** blinkiz has quit IRC08:09
*** blinkiz has joined #openstack-ansible08:10
*** nurdie has quit IRC08:11
*** bhujay has quit IRC08:12
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Remove rally_git_* overrides  https://review.openstack.org/57090608:18
*** cjloader has joined #openstack-ansible08:19
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Use ARA instead of profile_tasks callback  https://review.openstack.org/54627108:20
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Adds the certificate client key password to user_secrets  https://review.openstack.org/55824408:20
*** cjloader has quit IRC08:24
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible-tests master: Vagrantfile: Add openSUSE Leap 15.0 support  https://review.openstack.org/57112708:25
*** radek__ has joined #openstack-ansible08:28
hwoaranggood morning08:29
hwoarangcores: anyone willing to give me some +2 on the distro bp? https://review.openstack.org/#/q/topic:bp/openstack-distribution-packages+status:open (only the V+1 ones :) )08:30
*** DanyC_ has quit IRC08:31
*** DanyC has joined #openstack-ansible08:32
*** DanyC has quit IRC08:37
*** markvoelker has joined #openstack-ansible08:38
odyssey4mehwoarang done, making good progress there!08:43
hwoarangthank you odyssey4me08:45
*** hachi has joined #openstack-ansible08:45
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/ocata: [TEST] Pin sahara-tests to ~Ocata tag  https://review.openstack.org/57113508:46
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/pike: tests: Pin sahara-tests repo to ~Pike  https://review.openstack.org/57113708:49
*** nurdie has joined #openstack-ansible08:50
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/queens: tests: Pin sahara-tests repo to ~Queens  https://review.openstack.org/57113908:51
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/ocata: tests: Pin sahara-tests repo to ~Ocata  https://review.openstack.org/57114008:53
*** bhujay has joined #openstack-ansible08:56
odyssey4meevrardjp shall we get on with reviewing these? https://review.openstack.org/#/q/topic:bp/hybrid-messaging+(status:open+OR+status:merged)08:57
odyssey4meremember that I'll be following up with a series of patches to move all those vars into the role only, instead of requiring all the groups vars08:59
evrardjphey odyssey4me hwoarang09:01
evrardjpI was indeeding planning to come back to you on those 2 topics, so thanks.09:02
odyssey4meevrardjp we should also get this in as it seems to have finally resolved the disk space issues: https://review.openstack.org/56886709:03
*** armaan has quit IRC09:05
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-lxc_container_create stable/queens: Enable quota system and set qgroups  https://review.openstack.org/56886809:05
*** armaan has joined #openstack-ansible09:05
odyssey4meevrardjp https://review.openstack.org/568867 and https://review.openstack.org/568868 work together to solve the issue09:06
*** armaan has quit IRC09:09
*** markvoelker has quit IRC09:12
*** armaan has joined #openstack-ansible09:13
evrardjpodyssey4me: I am still reviewing the oslo.messaging changes09:13
evrardjphwoarang: it's interesting to see that distro packages take more time to install than from pip packages.09:21
hwoarangyeah i haven't looked at why this may happen09:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Convert role to use a common systemd service role  https://review.openstack.org/46617909:22
evrardjpoh god I thought the constraining of ara merged :/09:27
*** cshen has quit IRC09:29
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/pike: Do not log passwords (part 2)  https://review.openstack.org/57115009:30
*** cshen has joined #openstack-ansible09:30
odyssey4meevrardjp nope, johnsom mentioned something about the nova metadata service, but I haven't had the chance to dig into it yet09:30
*** udesale_ has joined #openstack-ansible09:31
evrardjpdo not log, part 2?09:31
odyssey4meyeah, the previous patch missed some09:32
*** udesale_ has quit IRC09:32
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/pike: tests: Pin sahara-tests repo to ~Pike  https://review.openstack.org/57113709:32
evrardjpI am glad I introduced this linting thing, but it was painful, so I am very sowy09:32
*** udesale_ has joined #openstack-ansible09:32
odyssey4meyeah, it's excellent09:32
*** udesale_ has quit IRC09:32
*** udesale_ has joined #openstack-ansible09:33
Taseerevrardjp: Good aftrnoon. How did it go through ? https://review.openstack.org/#/c/569344/09:33
*** udesale has quit IRC09:33
TaseerI thought I had to make the non-voting job to pass as well09:34
Taseershould I work on a separate patch now ?09:34
evrardjpyup09:37
evrardjp"Fix functional tests" is the first step :)09:38
odyssey4mewell, those patches are trying to enable you to at least release something functional ;)09:41
odyssey4meas far as I know, all previous builds are broken due to the cmd2 thing and rally being unconstrained09:42
openstackgerritCecilia Di Maulo proposed openstack/openstack-ansible master: Fixed typo in variable oslomsg_notify_transport  https://review.openstack.org/57115609:46
odyssey4meevrardjp all those hybrid messaging things depend on https://review.openstack.org/569445 as well, so 'check experimental' on them right now is a total waste ;)09:46
odyssey4mealso, the secrets merged some time ago: https://github.com/openstack/openstack-ansible/blob/cac7f2c183b5e597fae6629618ffa0b24c7ede5b/etc/openstack_deploy/user_secrets.yml#L39-L4009:48
openstackgerritMerged openstack/openstack-ansible-tests master: Restore namespace per service for oslo.messaging update  https://review.openstack.org/56952009:50
Taseerodyssey4me: is the cmd2 thing fixed ?09:50
Taseerthe latest build went past it, I guess.09:51
odyssey4meTaseer for roles, yes - for the integrated build, no09:51
*** chigang__ has quit IRC09:51
*** tux_ has joined #openstack-ansible09:52
TaseerI see, but I think it will get fixed by the time I reach that point09:52
*** tux_ has quit IRC09:53
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_tempest stable/ocata: Comment tempest_git_repo role default  https://review.openstack.org/57089109:59
*** udesale__ has joined #openstack-ansible10:02
*** udesale__ has quit IRC10:02
*** udesale has joined #openstack-ansible10:03
andymccrif anybody has a sec to review https://review.openstack.org/#/c/570881/ so i can set my mind at ease :P10:04
hwoarangandymccr: interesting finding :p10:05
*** udesale_ has quit IRC10:05
andymccrhwoarang: to be fair i put the initial patch in but didnt expect it to merge (i was hoping more for a discussion) but afterwards i realised the fix should be easy enough10:06
andymccrits only really for ubuntu 18.04 anyway10:06
andymccreverything else would have been fine10:06
odyssey4me*sigh* cloudnull the gremlin is back: http://logs.openstack.org/14/570914/3/check/openstack-ansible-deploy-ceph-ubuntu-xenial/3f70475/logs/openstack/aio1_repo_container-3e95219b/repo/venv_build_keystone-18.0.0.0b2-x86_64.log10:09
openstackgerritMerged openstack/openstack-ansible-os_heat master: defaults: Allow uwsgi to autoload required plugins.  https://review.openstack.org/57016510:10
openstackgerritMerged openstack/openstack-ansible-os_heat master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/57016610:10
openstackgerritMerged openstack/openstack-ansible-os_ceilometer master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/56916110:16
openstackgerritCecilia Di Maulo proposed openstack/openstack-ansible master: Fixed variable name notify_vhost  https://review.openstack.org/57116410:16
jrosserandymccr: if you are looki g at container networks this is quite important to me https://review.openstack.org/#/c/570456/ reviews appreciated10:17
*** cjloader has joined #openstack-ansible10:19
openstackgerritMerged openstack/openstack-ansible-os_designate master: Add support for using distribution packages for OpenStack services  https://review.openstack.org/56945710:22
*** cjloader has quit IRC10:23
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Fixed typo in variable oslomsg_notify_transport  https://review.openstack.org/57115610:24
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Fixed variable name notify_vhost  https://review.openstack.org/57116410:26
*** markvoelker has joined #openstack-ansible10:35
*** nicolasbock has joined #openstack-ansible10:50
*** adreznec has quit IRC11:00
*** adreznec has joined #openstack-ansible11:01
*** markvoelker has quit IRC11:06
*** hachi has quit IRC11:08
*** erolg has joined #openstack-ansible11:15
*** armaan has quit IRC11:16
*** armaan has joined #openstack-ansible11:17
*** dave-mccowan has joined #openstack-ansible11:21
*** hachi has joined #openstack-ansible11:24
*** dave-mcc_ has joined #openstack-ansible11:25
*** dave-mccowan has quit IRC11:26
*** udesale_ has joined #openstack-ansible11:28
*** sar_ has quit IRC11:29
*** udesale has quit IRC11:31
*** sar_ has joined #openstack-ansible11:31
*** udesale_ has quit IRC11:33
*** armaan has quit IRC11:33
*** armaan_ has joined #openstack-ansible11:33
*** chyka has joined #openstack-ansible11:35
*** ansmith has quit IRC11:36
*** chyka has quit IRC11:40
*** armaan_ has quit IRC11:49
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Implement unbound client config in containers as early as possible  https://review.openstack.org/57117811:52
odyssey4melogan- ^ would appreciate your review of that11:52
*** sar has joined #openstack-ansible11:54
*** epalper has quit IRC11:54
*** sar_ has quit IRC11:54
*** epalper has joined #openstack-ansible11:54
parasitidhi11:56
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible master: Implement unbound client config in containers as early as possible  https://review.openstack.org/57117811:56
parasitiddoes anyone know whats the workaround to get rid of the cmd2 issue ?11:56
parasitidi'm struggling with the repo_builder_upper_constraints_ovverides11:57
odyssey4meparasitid yes, the patches are waiting for reviews by the core team, once enough have done so it'll merge: https://review.openstack.org/#/q/I5f20a130032e1b65dc78828344345515975da4dc11:57
parasitidbut i can't get it working11:57
odyssey4meyou're trying to use that to make it work? because that won't work11:58
parasitidyes11:58
parasitidis there anyway to make it work in the meantime ?11:58
odyssey4methe wheel build already has a constraint for cmd2, so that's fine - the issue is the rally venv build is unconstrained11:58
parasitid(you may have notice that my pythonic knowloedge is very low)11:59
odyssey4mefor now the only option is to make a fork of the openstack-ansible repo, apply that patch, then use your fork11:59
parasitidoh but if it's only a manual patch in the osa repo it's okay for me12:00
parasitidi thought it was in a dependency rep12:01
cloudnullMornings12:01
cloudnullodyssey4me I'll continue the quest to smash that bug later this morning.12:02
cloudnullInteresting it's always "/tmp/openstack-venv-builder/venvs/keystone/lib/python2.7/site-packages/pip/utils/___init___init__.py"12:02
odyssey4meparasitid nope, just whichever one of those patches matches the series you're keen on deploying12:02
odyssey4mecloudnull nah, it's not always keystone - I've seen it on multiple different venvs12:03
cloudnullBut always in tmp.12:03
cloudnullIt's not like it's perating in opt12:03
cloudnull**operating12:03
cloudnullI think i may have been looking in the wrong place.12:04
*** pvradu has quit IRC12:04
*** pvradu has joined #openstack-ansible12:04
odyssey4mecloudnull yeah, always in /tmp - but that's where the wheel builds happen12:05
odyssey4meof course we could make the builds happen in an alternative location instead and see how that goes12:05
cloudnullThe tmp dir isnt persistent and all mem backed in the containers, if i remember right.12:05
* cloudnull just woke up, needs coffee. 12:05
*** pvradu has quit IRC12:06
hwoarangodyssey4me: i think you broke something :p12:09
odyssey4mehwoarang what did I do?12:09
hwoarangso swift gate is broken12:09
hwoarangbecause of https://github.com/openstack/openstack-ansible-tests/commit/d1d0d2156485b22b8d5a0e4f6cb1d5f5a15c8394#diff-8073df8a4d6f312057d1199b9c83508212:09
devxhello all!12:09
hwoarang==> opensuse423: TASK [Ensure rabbitmq vhost] ***************************************************12:09
hwoarang==> opensuse423: fatal: [infra1]: FAILED! => {"failed": true, "msg": "'dict object' has no attribute 'rabbitmq_all'"}12:09
hwoarangodyssey4me: the prob is that the swift tets/inventory does not contain rabbitmq_all group12:10
hwoarangso this playbook breaks when configuring keystone12:10
odyssey4mehwoarang ah, I didn't cater for a situation where neither group is present12:10
odyssey4mehwoarang I can fix that real quick if you'd like?12:11
hwoarangyeah if you have time. not sure how to fix it prop myself12:11
odyssey4mesure, I'll do it quickly12:11
hwoarangthanks a lot!12:12
*** Tahvok has quit IRC12:15
*** epalper has quit IRC12:15
*** epalper has joined #openstack-ansible12:16
*** sar has quit IRC12:19
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-tests master: Only setup rabbitmq when the inventory group is present  https://review.openstack.org/57118812:19
odyssey4mehwoarang ^ I think that'll do it?12:19
*** sar has joined #openstack-ansible12:19
odyssey4mehwoarang heh, your turn to break something :p https://github.com/openstack/openstack-ansible-os_heat/blob/3ac7ae6ea71f8e796d79476dd355d5692d218eee/vars/source_install.yml#L1912:21
odyssey4meI'll push a patch up now12:22
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_heat master: Fix heat_uwsgi_bin value for source-based builds  https://review.openstack.org/57118912:24
odyssey4mecores, could I get some reviews for https://review.openstack.org/#/q/I5f20a130032e1b65dc78828344345515975da4dc please - without those patches all stable releases are broken12:27
odyssey4methe master patch is failing due to a recent merge, and previously failed spuriously on unrelated things12:27
mgariepygood morning everyone12:27
*** udesale has joined #openstack-ansible12:29
hwoarangodyssey4me: oh how did this manage to pass CI12:29
mgariepyanyone is willing to review https://review.openstack.org/#/c/569141/ please12:30
*** hachi has quit IRC12:32
*** armaan has joined #openstack-ansible12:32
odyssey4memgariepy ah yeah, I thought it best to leave that to evrardjp and others who understand that setup better12:34
*** armaan has quit IRC12:44
odyssey4mehwoarang yeah, weird huh - I suspect that the heat role has very little real testing12:44
hwoarangodyssey4me: i think it was using hte uwsgi from the keystone venv12:44
hwoarangbecause _keystone_bin was inherited earlier on12:44
hwoarangjust a guess...12:44
odyssey4meheh, that's plausible12:45
*** udesale has quit IRC12:47
*** udesale has joined #openstack-ansible12:47
evrardjpthat's very weird12:49
evrardjpwe need a little more cleanup anyway of those vars12:50
evrardjphello devx!12:50
evrardjpit's been a while12:50
*** markvoelker has joined #openstack-ansible12:54
odyssey4mehmm, anyone else seen libvirt wheel build brokenness for pike? http://logs.openstack.org/50/571150/1/check/openstack-ansible-functional-centos-7/9b133aa/job-output.txt.gz#_2018-05-30_12_48_21_68344112:54
odyssey4meit looks like the new centos has broken pike :/12:54
odyssey4meas usual, the libvirt version and python wheel version don't match12:58
*** sajjadg has joined #openstack-ansible12:59
*** vadim has joined #openstack-ansible13:02
evrardjpI think I understand why it worked hwoarang13:02
hwoarangevrardjp: i just run it locally and it was using hte keystone venv indeed13:02
evrardjpyeah I see that in ARA already13:02
evrardjpbut I think I know why13:02
evrardjpthe problem is that there is a variable leak outside the role13:02
evrardjpand that's not because of keystone role, but a series of effects.13:03
evrardjpfirst, keystone and heat are located on the same host in testing: https://github.com/openstack/openstack-ansible-os_heat/blob/master/tests/inventory13:03
evrardjpsecond13:03
*** ansmith has joined #openstack-ansible13:04
evrardjplet me double check on the second part13:04
mgariepyodyssey4me, yep it seems like an issue with newer libvirt than python-libvirt..13:06
odyssey4memgariepy yep13:06
odyssey4mebusy checking what UCA for ubuntu has in terms of version to figure out what to do about it13:07
odyssey4meanyone have any idea how to search the RDO package base?13:07
mgariepyodyssey4me, installing from pkg would not cause issue tho.13:07
odyssey4memgariepy yep, but this is ocata - changing how that is all done is something we tried before, and it wasn't pretty... and I really don't wnt to try that on ocata13:08
*** armaan has joined #openstack-ansible13:08
odyssey4mewe might have a better chance once hwoarang has done the distro builds in Rocky, but porting that back is not an option here13:09
odyssey4meoh sorry, this is pike, not ocata13:09
*** throwsb1 has joined #openstack-ansible13:09
brad[]Hi all, documentation for openstack-ansible seems to indicate the br-vlan network is required, but my environment doesn't support VLAN tagging at all. What happens in a situation like that?13:09
odyssey4meUCA for pike has libvirt 3.6.0, and CentOS now has libvirt 3.9.013:10
mgariepylibvirt is managed by https://wiki.centos.org/SpecialInterestGroup/Virtualization13:11
mnasersorry for my MIA-ness, I have some stuff to be taken care of before the end of this month (may 31st)13:12
evrardjphwoarang: so yeah, here is what I think: we never saw that problem before because we were scoping variables appropriately. But basically, include_vars load ALL variables to inventory.13:12
mnaserso i should be far more available afterwards, sorry13:12
evrardjps/inventory/play/13:12
evrardjpbecause we are in the same play, for the same host, there is no reason to have dropped the var.13:13
hwoarangis that a good or a bad thing?13:13
evrardjpwe can try scoping it if you want13:13
evrardjpkinda okay for now.13:13
evrardjpBut I need to revise this with proper scoping later.13:13
evrardjplike I suggested in the past13:14
evrardjpit's just not a priority.13:14
evrardjpSo for the moment, please ignore.13:14
hwoarangok13:14
evrardjpthis could be easier to catch with testinfra :)13:14
evrardjpthat's for S and above.13:14
evrardjpok now the pike issue13:15
evrardjpbrad[]: well, you can use vxlan or provider flat networks13:16
brad[]evrardjp: nod13:16
brad[]evrardjp: I'm wondering what will happen (I haven't tried yet) if I simply don't configure a br-vlan13:17
evrardjpplease note we are using terrible names sometimes, for example, still calling it br-vlan for flat networks, just because.13:17
brad[]oh br-vlan is used for flat networks?13:17
evrardjpbrad[]: it is very flexible13:17
brad[]so external/provider networks would ... connect to that?13:17
evrardjpthe name is, after all, just a name.13:17
brad[]nod13:17
evrardjpopenstack_user_config.yml matters.13:17
evrardjpbrad[]: so we just configure neutron telling him "here is the nics for you, and they should be doing x" where x is vxlan/vlan/flat things13:18
openstackgerritMerged openstack/openstack-ansible-tests stable/queens: Pin ARA for Queens  https://review.openstack.org/57091113:19
evrardjpafter that, the deployer can create his own networks the way he wants. (See neutron networking guide if you need help there, or see many examples we have)13:19
*** hachi has joined #openstack-ansible13:19
brad[]evrardjp: ahh... so I can use arbitrary names for these? I'm doing a double-take on the "required" bit surrounding the br-vlan bridge13:19
evrardjpbrad[]: yes you could!13:19
evrardjpbut I don't see the point of having a variable to override default behavior, just for the sake of it :)13:19
odyssey4memgariepy unless there are any other ways to resolve this, basically I think we might need to put up a reno to say that pike/centos is broken, and anyone using it must upgrade to queens13:20
odyssey4mequeens uses libvirt-python 3.10, so it should be ok I think: https://github.com/openstack/requirements/blob/stable/queens/upper-constraints.txt#L18213:21
mgariepyodyssey4me, for a while13:22
mgariepyuntil the version is bumped in cenots.13:22
mgariepycentos**13:22
*** tux_ has joined #openstack-ansible13:23
odyssey4meyeah, I'm starting to think that perhaps centos should just go with distro-based installs and do away with source-based installs... clearly this is how people prefer to use centos13:23
evrardjpindeed.13:24
evrardjpmaybe we should just drop centos until R then :p13:24
mgariepydmsimard, what happens with RDO ? you install the pkg from the repos and you get newer version of pkg  all the time ?13:24
evrardjp(Looking at the ire in the eyes of mgariepy and mhayden there)13:24
brad[]The RDO repos are per-major-release13:24
evrardjphaha13:24
brad[]you get minor point release updates for e.g. queens when you have the queens repo13:24
*** markvoelker has quit IRC13:24
mgariepyfor RDO yeah but the virt sig ones ?13:25
* mhayden reminisces13:25
brad[]sometimes you're using the base packages like libvirt, sometimes RDO overrides13:25
mhayden:)13:25
odyssey4mesure, but in this case openstack tested with a specific libvirt version for pike - but it appears that RDO didn't build those packages for pike - they're using the base distro packages13:25
odyssey4meor they're using the virt-sig ones it seems13:25
evrardjpodyssey4me: so what's the stance for the latest RDO?13:25
brad[]also worthy of note, rdo-release and centos-release-openstack-queens (for example) do differ13:26
odyssey4meeven the virt-sig repo doesn't have the right package version: http://mirror.centos.org/centos/7/virt/x86_64/libvirt-latest/13:26
*** esberglu has joined #openstack-ansible13:26
mgariepyevrardjp, mnaser is running on centos ;) i don't know witch version tho.13:26
evrardjpbrad[]: you seem well aware of those things :)13:26
brad[]I think centos-release-openstack-queens is the one more geared for CentOS proper, while RDO is a staging ground for RHOSP13:26
mnaserhi13:26
odyssey4meI can't seem to find any reference to libvirt 3.6.0 for centos except https://cbs.centos.org/koji/buildinfo?buildID=1968413:26
evrardjpbrad[]: want to become maintainer of more centos things? :D13:26
mnaseri can clarify more things13:26
evrardjpbrad[]: you're on that slope!13:26
evrardjpmnaser: great.13:26
mnaserany specific questions? D:13:27
odyssey4memnaser basically the latest centos release has broken our pike builds13:27
evrardjpmnaser: yes: where are the libvirt versions matching for rdo package building?13:27
mgariepymnaser, which version of osa are you running ?13:27
* mnaser takes a deep breath13:27
evrardjpspam spam spam13:27
mnaserodyssey4me: ok, got a job that i can poke at?13:27
evrardjp:)13:27
odyssey4methe libvirt version available now is only 3.9.0, but pike is supposed to use 3.6.013:27
odyssey4mehttp://logs.openstack.org/50/571150/1/check/openstack-ansible-functional-centos-7/9b133aa/job-output.txt.gz#_2018-05-30_12_48_21_68344113:27
mnaserevrardjp: libvirt versions are managed by the virtualization sig, you'll notice it is a dependency that gets pulled in when you install centos-release-openstack-foo13:28
mnaser(afaik)13:28
mnaseri'd have to verify that statement13:28
brad[]evrardjp: haha I'd love to if time permitted!13:28
mnasermgariepy: queens except for one or two components13:28
odyssey4methe issue is that we're trying to build libvirt-python using the upper constraints for pike, but the libvirt version installed on the host has to match correctly otherwise that puke happens13:28
brad[]I'd be curious whether centos-release-openstack-pike has libvirt 3.6.0 in it13:28
mgariepyhmm nothing seems to be perfect so why don't we create our own distro ?13:28
evrardjpmgariepy: that's call deploy from sources :p13:29
hwoaranggentoo?13:29
odyssey4meI'm running a pike and queens build now using the os_nova role to verify whether they fail and what's in the applicable repositories13:29
mnaserok, so we're pinned to python-libvirt==3.5.0 because of requirements13:29
evrardjphwoarang: I expected that one from you.13:29
hwoarangbut you said 'deploy from sources + distro'13:29
evrardjpodyssey4me: cool thanks.13:29
mnaserbut we get 3.9.0 in rhel 7.513:29
odyssey4memnaser yes, 3.5.0 - my mistake earlier13:29
mnaseryeah, no worries13:29
evrardjphwoarang: we can use source rpms for centos.13:29
mgariepyhttp://mirror.centos.org/centos/7/cloud/x86_64/openstack-pike/13:30
hwoaranghah13:30
brad[]http://mirror.centos.org/centos/7/cloud/x86_64/openstack-pike/13:30
evrardjpbut yeah gentoo in this case is more appropriate.13:30
evrardjpbecause I am kidding anyway.13:30
brad[]d'oh :-)13:30
odyssey4memgariepy brad[] no libvirt there ;)13:30
mgariepyhaha :)13:30
mnaserso it looks like python-libvirt rpms are shipped part of the OS13:30
evrardjpthat's what mnaser just exaplined :)13:30
mnaserso does that mean if you're installing openstack on centos 7.513:30
mnaseryou're breaking the constraints?13:30
mnaser:o13:31
odyssey4memnaser yes13:31
mnasernaughty rdo13:31
evrardjphaha13:31
mnaseri wonder why we're pinned to 3.5.0 though13:31
evrardjpmaybe we should ping dmsimard and others13:31
mnaserseems very specific13:31
mnaserlet me look at git blame for requirements repo13:31
odyssey4me3.5.0 was what the community used through that cycle, and UCA has that version13:31
odyssey4meit was likely the latest release that cycle13:31
odyssey4mebear in mind this was ~ 1.5 cycles ago13:32
evrardjpyeah13:32
mgariepyi guess you don't want to install the latest version so you can reproduce stuff in a few year.13:32
mnaserso i guess that's something to bring up with the rdo team13:32
evrardjpyup13:33
mnasermaybe they should start packaging libvirt as part of the distro13:33
mnaserlet me head over to #rdo13:33
evrardjpmnaser: as part of rdo you mean?13:33
evrardjpmnaser: I think it makes sense to ship them together, i.e. re-use the work of the sig, but only when appropriate.13:33
mgariepyunless they have restriction on only supporting up to 7.4  for pike ?13:33
odyssey4methey may need to when the base OS does something like this13:33
evrardjpodyssey4me: yup.13:33
odyssey4mewell, there could be that too mgariepy13:33
evrardjpbut downgrading is always fun, right?13:34
odyssey4meif that's the case, then what do we tell our deployers - upgrade to queens, or I hope you have a frozen 7.4 updates repo13:34
evrardjpwell I guess it will always be the same story...13:34
mgariepyif it fixes it.13:34
evrardjpif 7.6 exists, or 8.1 vs 8.013:34
mgariepysame thing will probably happens on queens at some point...13:35
mnaserwhat if we13:36
mnaseryum install libvirt-3.5.013:36
odyssey4memnaser I tried to check if that version was available, but either it is not or my yum foo is not strong13:36
mgariepyor bump the version of python-libvirt13:37
odyssey4memgariepy then we break ubuntu13:37
mnaseri wouldnt feel comfortable bumping python-libvirt13:37
odyssey4meand to try and do one version for centos and another for ubuntu, I'd rather put a red poker in my eye than try and figure that out13:37
mnaseri'd say rdo is doing the wrong thing13:38
mgariepycan we install python-libvirt from pkg on centos instead of pip ?13:38
odyssey4merepo build was not designed for that13:38
mnaserhttp://centos.mirror.vexxhost.com/7/virt/x86_64/libvirt-latest/13:38
mgariepyha\13:38
mnasercould it be possible13:38
mnaserthat libvirt 3.5.0 never shipped?13:38
odyssey4memgariepy we tried that before, then we have to do that horrible symlink into the venv thing - it got messy13:38
odyssey4memnaser https://cbs.centos.org/koji/buildinfo?buildID=1968313:39
d34dh0r53mornings13:39
*** nicolasbock has quit IRC13:40
mnaserSo this is a scenario where using binaries would eliminate a whole bunch of stuff. But, I think moving forward with this, the best thing to do is to figure out what version of libvirt was being deployed in before 3.9.0 and then pin it13:42
mnaserThat’s also very backportable13:42
mnaserAnd it brings us back to the functional state we were in before, even if it’s not ideal13:42
mnasermgariepy: yum list installed | grep libvirt13:43
mnaserIf you have any pike functional nodes?13:43
mgariepyi only have a queens aio for now.13:44
mnaserhm okay13:46
mnaserlet me see if i have some13:46
*** tux_ has quit IRC13:46
mgariepymy colleague have pike install but they are located in the west ;)13:46
mgariepyi'll ask them then they get online.13:46
mnasertime to send an email to the pager13:46
mgariepyjra, ^^13:46
*** mma has quit IRC13:49
*** mma has joined #openstack-ansible13:50
openstackgerritMerged openstack/openstack-ansible-os_heat master: Fix heat_uwsgi_bin value for source-based builds  https://review.openstack.org/57118913:51
*** jwitko has joined #openstack-ansible13:51
*** jmnk_ has quit IRC13:52
*** hassenius has joined #openstack-ansible13:52
*** DanyC has joined #openstack-ansible13:53
*** nicolasbock has joined #openstack-ansible13:53
*** jmnk has joined #openstack-ansible13:54
odyssey4memnaser given the experience with trying to keep build-from-source working on centos, I'm inclined to remove the option for centos once the distro-package installs are working13:54
mnaserodyssey4me: yeah it seems like a challenge, and we can work with rdo to gate OSA so they don't publish packages that break us13:54
*** mma has quit IRC13:55
dmsimardthere's a couple pings and quite the backlog, let me know if you still need a hand13:55
*** DanyC has quit IRC13:57
*** klamath_ has joined #openstack-ansible13:57
odyssey4memnaser so rdo-qemu-ev points at http://mirror.centos.org/centos/7/virt/x86_64/kvm-common/13:58
*** sar has quit IRC13:59
openstackgerritMerged openstack/openstack-ansible-tests master: Only setup rabbitmq when the inventory group is present  https://review.openstack.org/57118813:59
*** Tahvok has joined #openstack-ansible14:00
odyssey4mewell, I'd hate to do this, but this is one way to make it work: https://copr.fedorainfracloud.org/coprs/berrange/virt-ark/packages/ :/14:01
*** klamath has quit IRC14:01
hasseniusHey, wonder if someone would be able to help with some recommandation. I'm trying to use openstack-ansible to stand up a openstack environment on Softlayer (IBM Cloud) bare metal servers, and the networking does not quite conform to assumptions and what is generally documented for openstack.14:04
odyssey4memnaser hwoarang evrardjp well, I guess we could resurrect this approach as a solution to be rid of building python-libvirt from source - it might simplify our lives forever: https://review.openstack.org/#/c/396821/1514:05
mnaserodyssey4me: i think ceph does the same thing right now14:06
hasseniusfor example, I don't really have an option to create a bunch of VLANs, but I do have 4 NICs on 2 network (2 bonds) to play with. I don't really care so much about having HA management, but need several compute nodes, so AIO isn't suitable. This is more about the workloads on opestack, with various different openstack configurations and options....14:06
odyssey4meit does, yes14:06
mnaserso i think that is a sensible approach that seems to be quite functional14:06
mnaserprobably speeds up builds too..14:06
odyssey4menot by much14:07
mnaserand maybe makes it a tad better tested, rather than having mismatching versions14:07
odyssey4mewell, I dunno about that - because now the version used for centos doesn't match what everyone in openstack tested and used14:07
*** bhujay has quit IRC14:08
hwoarangi havent followed the entire discussion to be honest so i can't comment. mixing stuff is always but though :p14:08
mnaseryeah, but that's a whole another subject14:08
mnaserthat's just centos shipping the wrong stuff14:08
*** EmilienM_PTO is now known as EmilienM14:08
* mnaser has had thoughts of making openstack-ansible repos to carry the stuff we need on top of rdo14:08
odyssey4mehwoarang yeah, not a fan of mixing it myself - but looks like we don't really have a choice here - this falls into a similar sphere as the ceph python libs14:09
mnaseri have to find a shipping company to get a bunch of pallets moved for new OSA deployments (yay), but i'm +1 on brining back 39682114:09
mnaserif someone can find the time to rebase it, it would be great, but if not, i'll take that on later14:10
odyssey4menah, I'll do it - never you mind14:10
mnaserthank you very much odyssey4me14:10
odyssey4meI'll do a new patch though and just add logan- as a co-author14:10
mnaseri'll addmyself to the review14:10
hwoarangcould you summarize the problem in the commit message/14:10
odyssey4memnaser I'll add you14:10
odyssey4mehwoarang yep, can do14:10
hwoarangi wonder if that would play well with the rest of distros :/14:11
*** chhagarw has joined #openstack-ansible14:11
*** epalper has quit IRC14:12
*** epalper has joined #openstack-ansible14:13
*** Guest62139 has quit IRC14:13
*** cjloader has joined #openstack-ansible14:13
*** radek__ has quit IRC14:16
*** jeferobles has joined #openstack-ansible14:17
evrardjpodyssey4me: I thought there were side effects with selinux14:17
evrardjpand at the end it was a full series of things to link to, to make it working.14:18
evrardjpwhich makes it an ugly hack14:18
*** armaan has quit IRC14:18
odyssey4meevrardjp well, yes - similar to the ceph python bindings14:18
odyssey4megiven that's matured now, perhaps we'll have a better time of it14:18
odyssey4meI remember the early days of using it being pretty bad.14:19
*** armaan has joined #openstack-ansible14:19
evrardjpI remember the upgrade issues.14:19
*** MikeW has joined #openstack-ansible14:19
*** flaper87 has joined #openstack-ansible14:20
MikeWHey guys is there an easy way to pull certificate authority chains into the python venvs like maybe during the build process? I'm not seeing it in the documentation I'm just digging through roles14:20
odyssey4mewell, an approach could be to just use this for centos only - given that's the only distro behaving badly :p14:20
odyssey4mealright, I have a duplicated failure for pike on a test machine - so I can poke at it a bit more there later14:21
odyssey4meI'll get a test patch up later this evening.14:21
odyssey4methinking about this - it may actually *solve* our role upgrade test issues14:23
evrardjpoh great odyssey4me that's the first step right there :)14:23
evrardjpMikeW: why?14:24
evrardjpHosts are hosts?14:24
evrardjpCan't you just add your CA in your hosts?14:24
evrardjp(and containers)14:24
*** jmnk has quit IRC14:24
*** nurdie has joined #openstack-ansible14:24
evrardjpI remember making it work with custom CA in containers, by copying the info from the host.14:25
odyssey4meevrardjp I wonder if we couldn't also solve the issues we have with the cryptography libraries in a similar way.14:25
evrardjpbut that might not be in the case anymore. Please add a test in that case :)14:25
MikeWevrardjp We're using an in-house CA to make our signed certs14:25
evrardjpodyssey4me: mmm14:25
evrardjpcryptography is a different thing.14:25
evrardjpbut cryptography has changed too.14:25
MikeWevrardjp We put them on the hosts, but for example the python bins will fail because they don't use the host CAs14:25
evrardjpMikeW: that looks like a bug, and a test gap.14:26
odyssey4mebasically the approach could be - if there's a C binding for the python lib, then we use the distro package and symlink it into the venv14:26
openstackgerritMarkos Chandras (hwoarang) proposed openstack/openstack-ansible master: releasenotes: Declare openSUSE Leap 42.3 as supported distribution  https://review.openstack.org/57121214:26
MikeWevrardjp Like on that has been fixed? We're on 17.1 something not stable/queens so we could have missed it14:26
evrardjpMikeW: nothing recent as far as I am aware. A bug stating your version should help.14:27
*** jmnk has joined #openstack-ansible14:27
MikeWevrardjp: I'm planning to do this unless you guys think it is stupid14:27
MikeWhttps://stackoverflow.com/questions/34931378/certificate-verification-when-using-virtual-environments14:27
evrardjpodyssey4me: cryptography 2.0 ships a manylinux1 wheel now14:28
evrardjpI think what we did was to use --no-binary for cryptography, right, odyssey4me ?14:29
evrardjpso explicitly asking for building it14:29
*** chhavi__ has joined #openstack-ansible14:29
evrardjpMikeW: the best is to file a bug, because I can't have a look rn14:29
*** chhagarw has quit IRC14:29
odyssey4meevrardjp it's been a while, I think we tried that and reverted it, but not sure14:29
evrardjpMikeW: that's the best way to get my focus eventually :)14:30
evrardjpodyssey4me: I am checking rn14:30
odyssey4meI'll take a peek after the libvirt issue is solved14:30
evrardjpbecause the idea is that we don't need it14:30
evrardjpthat's not a clear sentence, let me rephrase14:30
MikeWevrardjp I'll put in a bug once I get it fixed... I've got a Friday deadline screaming it's way towards me haha14:30
MikeW*its14:30
evrardjpconsuming cryptography 2.0 with suse/centos/ubuntu is straightforward, and requires just a pip install.14:31
evrardjpMikeW: probably worth checking in lxc_hosts then14:31
evrardjpthis way the base image is ready with the CA, and all the other containers, when created, will inherit from this.14:31
odyssey4meMikeW I suspect that you'd have to put the cert into the standard distro cert store, but then configure all the services .conf files to reference it if they don't pick it up automagically14:31
*** cmart has joined #openstack-ansible14:35
MikeWevrardjp odyssey4me: Excellent thanks guys!14:35
*** epalper has quit IRC14:35
*** hachi has quit IRC14:37
*** chhagarw has joined #openstack-ansible14:38
*** chhavi__ has quit IRC14:39
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Add doc links information to README.rst  https://review.openstack.org/57010514:40
evrardjpfolks, I just want to remind you that milestone 2 is already next week.14:41
openstackgerritMerged openstack/openstack-ansible stable/pike: Use upper constraints when installing ARA  https://review.openstack.org/57100214:41
openstackgerritMerged openstack/openstack-ansible stable/ocata: Update os_rally role SHA for cmd2 package pin  https://review.openstack.org/57100314:41
openstackgerritMerged openstack/openstack-ansible stable/queens: Use upper constraints when installing ARA  https://review.openstack.org/57100014:41
evrardjpit's running super fast :(14:42
odyssey4meevrardjp yeah, I need to sort out the meta deps to unblock the python build simplification :/14:43
*** tux_ has joined #openstack-ansible14:44
odyssey4metime is running quite short14:44
*** armaan has quit IRC14:49
odyssey4mecould I get another core review for https://review.openstack.org/570916 please?14:51
logan-done14:51
odyssey4methanks logan-14:51
MikeWHey what's the tag to force a wheel to redownload to a container?14:52
odyssey4meMikeW there are 3 things you can force to be redone14:52
odyssey4mereclone git repositories: https://github.com/openstack/openstack-ansible-repo_build/blob/master/defaults/main.yml#L5614:53
odyssey4merebuild wheels: https://github.com/openstack/openstack-ansible-repo_build/blob/master/defaults/main.yml#L6514:53
odyssey4merebuild venvs: https://github.com/openstack/openstack-ansible-repo_build/blob/master/defaults/main.yml#L7114:53
odyssey4meyou can just do something like: openstack-ansible repo-build.yml -e repo_build_wheel_rebuild=yes14:54
*** jeferobles has quit IRC14:54
MikeWThanks odyssey4me! Sorry for forgetting14:54
odyssey4meno worries - always just check the role being executed by the playbook - the defaults file is effectively the documentation for that role14:55
*** mbuil has quit IRC14:55
*** dave-mcc_ is now known as dave-mccowan14:55
*** mma has joined #openstack-ansible14:55
*** pvradu has joined #openstack-ansible14:56
*** klamath_ is now known as klamath14:59
*** mma has quit IRC15:00
*** armaan has joined #openstack-ansible15:01
*** openstacking_123 has joined #openstack-ansible15:05
*** gyee has joined #openstack-ansible15:05
*** tux_ has quit IRC15:06
*** tux_ has joined #openstack-ansible15:07
*** markvoelker has joined #openstack-ansible15:08
*** ArchiFleKs has quit IRC15:09
*** bhujay has joined #openstack-ansible15:12
*** tux_ has quit IRC15:14
mgariepyevrardjp, https://review.openstack.org/#/c/569141/ what did you wanted to see with experimental check ?15:16
*** bhujay has quit IRC15:16
*** bhujay has joined #openstack-ansible15:17
*** pvradu has quit IRC15:18
*** ansmith has quit IRC15:28
*** tux_ has joined #openstack-ansible15:28
*** sajjadg has quit IRC15:30
*** sar has joined #openstack-ansible15:30
*** tux__ has joined #openstack-ansible15:31
*** pcaruana has quit IRC15:33
*** tux_ has quit IRC15:35
openstackgerritMerged openstack/openstack-ansible-lxc_container_create master: Ensure container configuration is sorted  https://review.openstack.org/57088115:36
*** udesale has quit IRC15:36
*** ansmith has joined #openstack-ansible15:40
evrardjpmgariepy: nothing, just my blindness.15:41
evrardjp:p15:41
*** markvoelker has quit IRC15:41
*** udesale has joined #openstack-ansible15:43
*** hasseniu_ has joined #openstack-ansible15:43
mgariepyevrardjp, thanks :)15:45
odyssey4mecould I get another core review for https://review.openstack.org/570891 please (evrardjp has already reviewed)15:46
*** hassenius has quit IRC15:46
evrardjp^ that's not a sign of quality nowadays, so read it carefully! :p15:47
evrardjp(as always!)15:47
*** tux_ has joined #openstack-ansible15:47
*** tux__ has quit IRC15:47
odyssey4memeh, it's a backport :p15:48
*** jeferobles has joined #openstack-ansible15:49
*** tux__ has joined #openstack-ansible15:51
*** ansmith has quit IRC15:51
evrardjp:D15:52
*** ansmith has joined #openstack-ansible15:52
evrardjpodyssey4me: a better reason to pay more attention!15:52
evrardjp:)15:52
odyssey4meheh, fair point15:52
*** cshen has quit IRC15:52
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia master: Adds constraints to all pip installs  https://review.openstack.org/57123915:53
*** tux_ has quit IRC15:54
*** tux_ has joined #openstack-ansible15:56
*** radek__ has joined #openstack-ansible15:57
*** tux__ has quit IRC15:58
*** chyka has joined #openstack-ansible16:01
*** tomcsi has quit IRC16:05
hwoarangdoes anyone know why the os_swift role pulls the python-cinderclient package?16:06
odyssey4mehwoarang seriously? that's odd - andymccr ?16:07
*** tomcsi has joined #openstack-ansible16:07
hwoarangit's in defaults/main.yml16:07
andymccrlemme see16:07
*** electrofelix has quit IRC16:08
*** hasseniu_ has quit IRC16:09
*** cmart has quit IRC16:17
odyssey4mehwoarang how do I list the files in a package for opensuse, similar to 'dpkg -L python-libvirt' (debian) or 'repoquery -l libvirt-python' (redhat)16:21
hwoarangrpm -qlp $package.rpm16:22
hwoarangah you mean without having the actual rpm16:23
odyssey4mewell, it would be installed at thee stage of the query16:23
odyssey4me*the16:23
*** pcaruana has joined #openstack-ansible16:23
andymccrits been there a long time - mega patches with diffs that are too big to load by default are coming up now :P16:24
hwoarangyeah dont know how you could do it with zypper. if it's installed you can use rpm -ql <package name>16:24
hwoarangandymccr: well i suppose we can just drop it. i can't see anything using it really :)16:25
andymccryeah i cant think of any reason you would want that16:26
*** udesale has quit IRC16:26
hwoarangok will submit a patch since i am messing with this role for the distro package stuff16:27
openstackgerritMerged openstack/openstack-ansible stable/queens: Pin ARA for Queens  https://review.openstack.org/57091616:28
*** jra has quit IRC16:34
*** jra has joined #openstack-ansible16:34
odyssey4mehwoarang thanks, rpm -ql will work for centos and opensuse then, which is nice16:41
*** tomcsi has quit IRC16:43
*** erolg has quit IRC16:45
*** klamath has quit IRC16:47
*** jeferobles has quit IRC16:48
*** klamath has joined #openstack-ansible16:48
*** tux_ has quit IRC16:49
*** armaan has quit IRC16:50
*** tux_ has joined #openstack-ansible16:53
xgerman_wonder if I can get some reviews of https://review.openstack.org/#/c/558244/16:56
*** SimAloo has joined #openstack-ansible17:00
*** mbuil has joined #openstack-ansible17:01
xgerman_and some for this: https://review.openstack.org/57123917:01
*** klamath has quit IRC17:01
xgerman_thanks evrardjp17:02
evrardjpyw17:02
*** DanyC has joined #openstack-ansible17:06
*** radek__ has quit IRC17:06
odyssey4meevrardjp experimental checks aren't useful until https://review.openstack.org/570914 merges17:07
*** klamath has joined #openstack-ansible17:07
evrardjpdarn it17:08
*** jeferobles has joined #openstack-ansible17:09
*** DanyC has quit IRC17:10
odyssey4mefor now I think we should hold back merging anything that's risky until that merges17:11
odyssey4meotherwise we might break something again17:12
jrossercuston CA certs is probably worthy of an appendix user-story. you have both the system certifiacte store and certifi, and it's hard/impossible to add a custom CA cert to certifi in a way thats robust to a package update undoing17:13
odyssey4mejrosser yeah, the whole internal ssl thing is hard and needs work17:16
jrosserfwiw we add custom CA certs to the system certificate store and then make sure certfi isnt used by setting REQUESTS_CA_BUNDLE to point at the system pem file17:16
*** jeferobles has quit IRC17:16
*** tomcsi has joined #openstack-ansible17:17
*** ansmith has quit IRC17:25
*** markvoelker has joined #openstack-ansible17:30
jrosserodyssey4me: is there a pattern somewhere for conditionally including an item in a list of packages to install, like you might find in vars/ubuntu1604.yml ?17:30
odyssey4mejrosser check vars/main in os_nova I think17:31
odyssey4meput the distro-specific package group into the applicable distro vars file, then do the conditionals in /vars/main to produce a single package list for a one-shot install17:32
jrosserah yes, i see17:32
jrosserthanks17:32
*** jeferobles has joined #openstack-ansible17:32
*** ansmith has joined #openstack-ansible17:41
*** klamath has quit IRC17:42
*** klamath_ has joined #openstack-ansible17:42
*** DanyC has joined #openstack-ansible17:45
*** jeferobles has quit IRC17:46
jramnaser: http://paste.openstack.org/show/722374/17:46
jramgariepy: ^^17:47
*** DanyC has quit IRC17:49
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Use the distro package for libvirt-python  https://review.openstack.org/57127417:51
*** hassenius has joined #openstack-ansible17:52
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_designate master: Create rndc key  https://review.openstack.org/57025417:55
openstackgerritJonathan Rosser proposed openstack/openstack-ansible-os_designate master: Ensure rndc tool is available when rndc keys are used  https://review.openstack.org/57035317:55
odyssey4memnaser hwoarang let's see how https://review.openstack.org/571274 goes (libvirt python thing)17:56
*** markvoelker has quit IRC18:00
*** pcaruana has quit IRC18:09
*** ansmith has quit IRC18:10
*** ansmith has joined #openstack-ansible18:11
*** jra has quit IRC18:11
*** jra has joined #openstack-ansible18:12
*** hassenius has quit IRC18:13
odyssey4melogan- cloudnull got some time to think through something with me?18:14
odyssey4mein https://launchpad.net/bugs/1758144 we see that the ordering of things is a bit broken for queens/rocky18:16
openstackLaunchpad bug 1758144 in openstack-ansible "resolv.conf in containers set too late" [Medium,In progress] - Assigned to Jesse Pretorius (jesse-pretorius)18:16
odyssey4meI pushed up https://review.openstack.org/571178 to try and resolve it, but logan- has rightly pointed out that the unbound playbook has to run before the unbound clients can be configured, and the unbound services may be in a container.18:17
openstackgerritAndy Smith proposed openstack/openstack-ansible-os_nova master: Update to use oslo.messaging services for RPC and Notify  https://review.openstack.org/55862018:18
odyssey4meWhat this means is that the only resolution I can see here is to split https://github.com/openstack/openstack-ansible/blob/master/playbooks/containers-lxc-create.yml#L59-L73 into another play which executes after the unbound services, but that mixes things up somewhat because I think some of the things done in there need to be run on the unbound hosts before the service is setup... so it's chicken and egg.18:20
odyssey4meso we could go back to how we did things in pike, but then execution time significantly increases and evrardjp won't be pleased18:21
odyssey4mewe're using a mix of JIT configuration and non-JIT, and that's screwing things up18:31
odyssey4melogan- how does the unbound container install the unbound packages? does that go through the host's NAT bridge? if so, why is the pip install failing in that bug?18:32
openstackgerritAndy Smith proposed openstack/openstack-ansible-os_glance master: Update to use oslo.messaging services for RPC and Notify  https://review.openstack.org/56401518:33
*** mbuil has quit IRC18:37
*** klamath_ is now known as klamath18:39
openstackgerritMerged openstack/openstack-ansible-os_octavia master: Adds constraints to all pip installs  https://review.openstack.org/57123918:45
*** markvoelker has joined #openstack-ansible18:50
*** poopcat has joined #openstack-ansible18:51
*** jeferobles has joined #openstack-ansible18:54
*** markvoelker has quit IRC18:55
*** yolanda has joined #openstack-ansible18:57
openstackgerritAndy Smith proposed openstack/openstack-ansible-os_heat master: Update to use oslo.messaging service for RPC and Notify  https://review.openstack.org/56403018:57
*** jra has quit IRC18:58
*** jra has joined #openstack-ansible18:58
*** yolanda_ has quit IRC18:59
*** cjloader has quit IRC18:59
*** cjloader_ has joined #openstack-ansible18:59
cloudnulllogan- sure whats up ?19:01
*** cjloader_ has quit IRC19:01
*** cjloader has joined #openstack-ansible19:01
cloudnullopps odyssey4me - me looking19:01
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/pike: Adds constraints to all pip installs  https://review.openstack.org/57128219:05
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/pike: Adds constraints to all pip installs  https://review.openstack.org/57128219:06
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: Adds constraints to all pip installs  https://review.openstack.org/57128319:10
openstackgerritAndy Smith proposed openstack/openstack-ansible-os_aodh master: Update to use oslo.messaging services for RPC and Notify  https://review.openstack.org/56898919:11
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: Adds constraints to all pip installs  https://review.openstack.org/57128319:11
mnaserodyssey4me: looks like you fix worked but the upgrade job is broked19:19
mnaserborked19:19
mnaserand im going to guess it's because the upgrade job is creating a libvirt.py file by manually installing it19:19
mnaserhence "efusing to convert between file and link"19:19
mnaserodyssey4me: do we want to add `force: true` with a note to remove that in the next cycle?19:21
mnaserill add that to the review19:21
*** nicolasbock has quit IRC19:33
*** jeferobles has quit IRC19:36
openstackgerritAmy Marrich (spotz) proposed openstack/openstack-ansible master: Fix typo in link text  https://review.openstack.org/57128919:43
*** tomcsi has quit IRC19:44
*** markvoelker has joined #openstack-ansible19:45
guilhermespcloudnull: hey man! I'm using this version https://github.com/openstack/openstack-ansible-ops/tree/master/elk_metrics because elk_metric_6x requires ansible 2.5+. The process was ok, the service and containers were created.19:46
*** cjloader has quit IRC19:46
*** cjloader has joined #openstack-ansible19:46
guilhermespI didnt run reverseProxyKibana and I placed in my user variables the entries for haproxy for the services19:47
*** nicolasbock has joined #openstack-ansible19:48
*** cjloader has quit IRC19:48
*** cjloader_ has joined #openstack-ansible19:48
guilhermespbut checking in the kibana and elasticsearch+logstash container, there are only 5601 and 5044 processes respectively. I was expecting 9200 process running in kibana container to be able to acess the dashboard. Is there anything missing in this version of elk in ops repo?19:49
*** cjloader_ has quit IRC19:49
*** cjloader has joined #openstack-ansible19:50
*** markvoelker has quit IRC19:54
openstackgerritJesse Pretorius (odyssey4me) proposed openstack/openstack-ansible-os_nova master: Use the distro package for libvirt-python  https://review.openstack.org/57127419:54
devxguilhermesp which elk version did you use?20:02
guilhermespdevx: I was simply following the readme of the repo, so I installed kibana by runnint openstack-ansible installKibana.yml ( https://github.com/openstack/openstack-ansible-ops/blob/master/elk_metrics/installKibana.yml )20:05
*** pvradu has joined #openstack-ansible20:05
guilhermespas stated here https://github.com/openstack/openstack-ansible-ops/tree/master/elk_metrics20:06
jrosserguilhermesp: this will set you up an isolated ansible 2.5 install that won't mess up your deploy host https://github.com/openstack/openstack-ansible-ops/blob/master/elk_metrics_6x/bootstrap-embedded-ansible.sh20:06
devxI would use https://github.com/openstack/openstack-ansible-ops/tree/master/elk_metrics_6x instead of the elk_metrics but alternative you can use what jrosser mention20:06
guilhermespjrosser: huuum, I didn't pay attention in this detail. Great20:07
guilhermespso we can infer that elk_metrics is not totally funcional ( https://github.com/openstack/openstack-ansible-ops/tree/master/elk_metrics ), isn't it?20:08
jrossersource bootstrap-embedded-ansible.sh <- setup and fiddle the environment to use ansible 2.5 and the necessary plugins20:08
jrosserdeactivate <- put everything back how it was20:08
*** throwsb1 has quit IRC20:09
guilhermespjrosser: great. Gonna give a try. Tell here the results. Thanks guys20:11
jrosserguilhermesp: i submitted a couple of tiny patches to make it work on queens, i know it's basically OK for that20:12
*** hassenius has joined #openstack-ansible20:13
guilhermespjrosser: In my case, I'm going to deploy it in my pike environment. But as was mentioned here, should work in previous versions too20:14
devxI've tested on kilo running trusty and it worked20:15
jrosseri think that should be fine, what i did applies equally to pike as well20:15
*** armaan has joined #openstack-ansible20:15
*** pvradu_ has joined #openstack-ansible20:15
cloudnullI like ponies20:15
*** pvradu has quit IRC20:15
*** pvradu_ is now known as pvradu20:15
guilhermespcloudnull: ponies are cute20:16
prometheanfirelearning new things all the time20:16
guilhermespspecially when used by hobbits and dwarves20:17
*** hassenius has quit IRC20:18
*** jeferobles has joined #openstack-ansible20:21
*** pvradu has quit IRC20:21
*** markvoelker has joined #openstack-ansible20:25
*** mstrohl has joined #openstack-ansible20:28
*** cshen has joined #openstack-ansible20:29
*** chhagarw has quit IRC20:32
*** ansmith has quit IRC20:35
*** hassenius has joined #openstack-ansible20:36
*** hasseniu_ has joined #openstack-ansible20:37
*** hassenius has quit IRC20:41
*** jeferobles has quit IRC20:50
*** radeks__ has quit IRC20:50
*** jeferobles has joined #openstack-ansible20:53
*** vadim has quit IRC20:58
*** tomcsi has joined #openstack-ansible20:58
*** tux_ has quit IRC20:59
cloudnullhaha. I seem to love them21:00
* cloudnull didnt lock my computer at the office 21:01
cloudnullthanks prometheanfire21:01
*** SimAloo has quit IRC21:03
*** cjloader has quit IRC21:05
spotzcloudnull guilhermesp You both get pony points!!!!21:06
*** hasseniu_ has quit IRC21:09
*** markvoelker has quit IRC21:14
*** markvoelker has joined #openstack-ansible21:14
*** markvoelker has quit IRC21:18
*** jwitko_ has joined #openstack-ansible21:24
*** jwitko_ has quit IRC21:25
*** jeferobles has quit IRC21:26
*** jwitko_ has joined #openstack-ansible21:26
*** jwitko has quit IRC21:28
*** jeferobles has joined #openstack-ansible21:31
*** jwitko_ has quit IRC21:32
prometheanfirecloudnull: np21:32
*** ansmith has joined #openstack-ansible21:35
*** armaan has quit IRC21:39
*** jra has quit IRC21:39
*** jra has joined #openstack-ansible21:40
*** esberglu has quit IRC21:43
*** nurdie has quit IRC21:46
*** klamath has quit IRC21:54
openstackgerritGerman Eichberger proposed openstack/openstack-ansible stable/queens: Adds the certificate client key password to user_secrets  https://review.openstack.org/57131921:55
*** klamath has joined #openstack-ansible21:56
*** klamath_ has joined #openstack-ansible21:58
*** klamath has quit IRC21:58
*** jra has quit IRC21:59
openstackgerritGerman Eichberger proposed openstack/openstack-ansible-os_octavia stable/queens: An OSA password needs to end with _password  https://review.openstack.org/57132321:59
*** jra has joined #openstack-ansible21:59
*** jwitko has joined #openstack-ansible22:02
*** klamath_ has quit IRC22:02
*** klamath has joined #openstack-ansible22:03
*** jeferobles has quit IRC22:07
*** openstacking_123 has quit IRC22:08
*** tux_ has joined #openstack-ansible22:22
*** dave-mccowan has quit IRC22:23
*** nurdie has joined #openstack-ansible22:25
*** tux_ has quit IRC22:26
*** klamath_ has joined #openstack-ansible22:29
*** klamath has quit IRC22:29
*** klamath_ has quit IRC22:35
*** mstrohl has quit IRC22:36
*** klamath has joined #openstack-ansible22:36
*** jeferobles has joined #openstack-ansible22:45
*** nicolasbock has quit IRC22:47
*** jeferobles has quit IRC22:47
*** klamath has quit IRC22:54
*** klamath has joined #openstack-ansible22:56
*** MikeW has quit IRC22:57
*** tosky has quit IRC23:04
*** klamath has quit IRC23:07
*** jwitko_ has joined #openstack-ansible23:08
*** hassenius has joined #openstack-ansible23:09
*** jwitko has quit IRC23:11
*** klamath has joined #openstack-ansible23:12
*** pmannidi has quit IRC23:13
*** hassenius has quit IRC23:13
*** jwitko__ has joined #openstack-ansible23:14
*** jwitko_ has quit IRC23:16
*** cshen has quit IRC23:20
*** markvoelker has joined #openstack-ansible23:25
*** chyka has quit IRC23:31
*** klamath has quit IRC23:35
*** markvoelker has quit IRC23:43
*** markvoelker has joined #openstack-ansible23:44
*** jwitko__ has quit IRC23:44
*** cjloader has joined #openstack-ansible23:46
*** markvoelker has quit IRC23:48
*** klamath has joined #openstack-ansible23:50
*** mmercer has joined #openstack-ansible23:54
*** klamath has quit IRC23:58
*** klamath has joined #openstack-ansible23:59

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!